So our security team had an investigation in our sharepoint site and one of the things they've mention is
"The application does not implement “no-store” and/or “no-cache” setting for Cache-Control and “no-cache” for Pragma headers in all of its pages. This allows SSL pages to be cached and sensitive information can be gathered which can aid an attacker on how to customize its script to exploit the application."
"Restrict the ability to cache application pages that contain sensitive data by implementing "Cache-Control: no-store" and either "Pragma: no-cache" or "Cache-Control: no-cache" response directives."
How can i do that?